Code Injection in Binutils - CVE-2014-8485
Published: December 10, 2014 / Updated: July 28, 2020
Vulnerability identifier: #VU32468
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-8485
CWE-ID: CWE-94
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.
Affected software
Binutils
Amazon Linux AMI
Gentoo Linux
Fedora
binutils (Alpine package)
avr-binutils
arm-none-eabi-binutils-cs
Amazon Linux AMI
Gentoo Linux
Fedora
binutils (Alpine package)
avr-binutils
arm-none-eabi-binutils-cs
How to mitigate CVE-2014-8485
Install update from vendor's website.
binutils (Alpine package) - update to 2.24-r3
avr-binutils - update to 2.24-4.fc21
arm-none-eabi-binutils-cs - update to 2014.05.28-3.fc21
avr-binutils - update to 2.24-4.fc21
arm-none-eabi-binutils-cs - update to 2014.05.28-3.fc21
External References
- http://lcamtuf.blogspot.co.uk/2014/10/psa-dont-run-strings-on-untrusted-files.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145262.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145328.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145742.html
- http://secunia.com/advisories/62241
- http://secunia.com/advisories/62746
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:029
- http://www.openwall.com/lists/oss-security/2014/10/26/2
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/70741
- http://www.ubuntu.com/usn/USN-2496-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1157276
- https://security.gentoo.org/glsa/201612-24
- https://sourceware.org/bugzilla/show_bug.cgi?id=17510
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commit;h=493a33860c71cac998f1a56d6d87d6faa801fbaa